Privacy Policy

01 · Scope

Scope and data controller

The data controller for blogfactory.io is GRİD SOLUTİON BİLİŞİM VE YAZILIM TİCARET LİMİTED ŞİRKETİ ("Grid Solution", "we", "us", or "our").

This policy covers the public marketing website, documentation, Help Center, and Cloud launch update form. It does not describe a self-hosted operator's data practices, and it does not create terms for the future BlogFactory Cloud service.

02 · Collection

Data we collect

Cloud launch updates

Your normalized email address, the consent version, and the first and most recent consent timestamps when you submit the form.

Security and delivery data

Cloudflare may process IP address, browser, device, request, and anti-abuse signals required to deliver and protect the website and operate Turnstile.

Privacy correspondence

Your email address and the information you include when you contact us about a privacy request.

We do not currently collect payment details, Cloud account data, or product content through this marketing site. The site code does not add an advertising tracker or a separate marketing analytics service.

03 · Purpose

How we use personal data

• To record and honour your request for a BlogFactory Cloud launch update.
• To protect the website, prevent abuse, and diagnose delivery failures.
• To answer privacy requests and comply with applicable legal obligations.

The launch update is based on the consent you provide with the form. Website security and delivery processing is limited to what is necessary for operating and protecting the public site and our legitimate interests, subject to applicable law.

04 · Processors

Providers and international transfers

Cloudflare Pages serves the website, Turnstile checks abuse, and an EU-jurisdiction Cloudflare D1 database stores launch update records. Cloudflare is an international provider and may process network and security data in locations outside Türkiye as part of its global infrastructure.

Sanity supplies published website content at build time. Visitors do not submit Cloud launch form data or self-hosted product content to Sanity through this site.

We do not sell or rent personal data. We disclose data only to providers needed for the purposes above, when required by law, or as part of a lawful corporate transaction with appropriate protections.

05 · Browser data

Cookies and tracking

The public website does not currently add advertising cookies. Cloudflare and Turnstile may use cookies or similar signals that are necessary for security, bot detection, and delivery. Blocking those mechanisms may prevent the launch update form from working.

06 · Retention

How long we keep data

Cloud launch update records will be deleted within 90 days after the Cloud launch notification is sent. You can request earlier deletion at any time. Privacy correspondence is kept only as long as needed to answer the request, establish that it was handled, or meet a legal obligation.

Infrastructure and security records follow the applicable provider configuration and are retained only for operational security, troubleshooting, or legal requirements.

07 · Deployment boundary

Self-hosted BlogFactory instances

A Community instance runs on infrastructure selected and controlled by its operator. Content, credentials, MCP tokens, and operation records in that instance do not route through this marketing website.

The operator is responsible for its own privacy notice, legal basis, access controls, retention, backups, and the practices of its chosen hosting, AI, CMS, Google, storage, and email providers. This policy does not make Grid Solution the controller for an independently operated installation.

08 · Your choices

Your privacy rights

Under Article 11 of Türkiye's Personal Data Protection Law No. 6698 and other laws that may apply to you, you may have rights to:

• Learn whether we process your personal data and request information about that processing.
• Learn the purpose of processing and the recipients inside or outside Türkiye.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction when the legal conditions are met and notification of that action to relevant recipients.
• Object to a result produced against you solely through automated analysis.
• Request compensation for damage caused by unlawful processing.

Send a request to hello@ortakalan.media. We may ask for information reasonably necessary to verify your identity and locate the relevant record. You can read the official English translation of Law No. 6698.

09 · Protection

Security and children

We use access controls and service-level security features appropriate to the narrow data flow described here. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.

The public website and launch update form are not directed to children. If you believe a child submitted personal data, contact us so we can investigate and remove it where required.

10 · Updates

Changes and contact

We may update this policy when the website, providers, or law changes. The revised page will show a new last-updated date. BlogFactory Cloud will require a separate, expanded notice before hosted accounts or product-data processing are offered.

Privacy questions and requests: hello@ortakalan.media